184cd96ee6
Don't Update Minor Versions During RC Phase
2025-05-06 11:56:41 -06:00
5c92d90e36
Align Dependabot PRs with CONTRIBUTING
...
Previously Dependabot was setup to submit PRs to every branch.
However, this does not align with the contributing guidelines which
state to only submit a PR on the oldest branch so that merge forward
strategy can be used.
This changes the dependabot configuration to better align with our
contributing guidelines:
- PRs for github actions are submitted against the oldest branch since
all branches will need updated using a merge forward stategy. Merging a
github action will require us to merge forward manually and preserve
the changes in the oldest branch to pickup the github actions update.
- Java dependencieds are submitted against each branch since they will
need to merge -s ours to preserve the correct major.minor semantics.
Merging a java dependency will now require us to do the merging manually.
2025-05-02 15:04:20 -05:00
5610b35a2f
Ignore updates to org.apache.directory.shared
...
Related gh-16277
[skip ci]
2024-12-16 11:10:38 -06:00
2fcd305509
Increment to 6.5.0-SNAPSHOT
...
Closes gh-16221
2024-12-12 21:47:11 -06:00
180ac5497e
Remove exclusion that is no longer used
...
Issue gh-16268
2024-12-12 15:02:11 -06:00
cb08e37d31
Remove 5.8.x and 6.2.x dependabot configuration
...
Closes gh-16268
2024-12-12 15:01:07 -06:00
78fd8bf3b7
Specify Labels for npm Updates
...
This brings the labels in line with the other dependency updates that
aren't of interest for the release notes. It also avoids adding labels
that aren't already defined by the project.
2024-08-26 13:37:04 -06:00
cba82e4893
Allow minor version Dependabot updates
2024-08-12 11:32:17 -03:00
f6ea99d8a3
Prepare for Spring Security 6.4
...
Closes gh-15155
2024-05-24 11:41:28 -03:00
6818480d7a
Remove 6.1.x from Dependabot
2024-05-23 08:02:06 -03:00
dc27ae59ad
Configure Dependabot to update docs/package.json
...
Closes gh-15128
2024-05-23 07:58:50 -03:00
d1cd51ebd2
Allow updates from spring-io and spring-security-release-tools
...
Closes gh-15124
2024-05-21 14:24:51 -03:00
746ee27dff
Add labels for dependabot updates to GitHub Actions
...
Issue gh-14485
2024-05-09 13:44:56 -05:00
007fea5b74
Remove minor version dependency updates for main
2024-04-17 20:52:01 -03:00
8f8773212b
Ignore minor versions from com.gradle.enterprise plugin
2024-04-05 11:41:16 -03:00
0560863320
Include npm updates for docs-build
...
Issue gh-14819
2024-04-01 13:31:02 -03:00
f57a093137
Accept dependency updates for minor versions
...
Closes gh-14732
2024-03-13 09:59:44 -03:00
f81e51a643
Update dependabot.yml
2024-02-13 13:48:39 +00:00
29f20decce
Update dependabot.yml
2024-02-02 14:36:39 +00:00
7a8f9b446e
Configure Dependabot for docs-build's build.gradle
...
Issue gh-14482
2024-01-23 15:03:46 -03:00
ebef5a8783
Ignore updates in sjohnr/slack-workflow-status
...
Closes gh-14325
2023-12-14 15:07:22 -03:00
6795a49b02
Include milestones in Dependabot config
...
Issue gh-14298
2023-12-14 08:48:36 -03:00
5f0fa0ed7e
Include GitHub Actions in the Dependabot config
...
Closes gh-14298
2023-12-14 08:46:34 -03:00
93befd5f26
Ignore org.apache.directory.shared
2023-12-05 17:38:52 -07:00
d50698a269
Prepare for Spring Security 6.3
...
Closes gh-14210
2023-12-05 15:49:42 -07:00
6f45be28a0
Remove 6.0.x from Dependabot config
...
Closes gh-14227
2023-12-01 08:45:51 -03:00
02989fede7
Revert "Allow minor versions for org.springframework group id"
...
This reverts commit d3f29ebd7b
2023-10-17 09:35:44 -03:00
ca5ed7f549
Include Spring Milestone Maven Registry in Dependabot
...
Closes gh-14029
2023-10-16 08:27:32 -03:00
d3f29ebd7b
Allow minor versions for org.springframework group id
...
Issue gh-14023
2023-10-16 07:55:00 -03:00
729f103cd7
Do not update ApacheDS version
...
Issue gh-13873
2023-09-29 14:18:18 -03:00
99deda3b6f
Configure dependabot.yml
...
Closes gh-13873
2023-09-29 13:53:00 -03:00
Josh Cummings
Rob Winch
Steve Riesenberg
Josh Cummings
Marcus Hert Da Coregio
marcusdacoregio